Application Serial No. 09/879, 734 
Response to 11-3-05 Office Action with RCE 



Attorney Docket No, CNF-001 
Page 2 of 14 



Amendments to the Claims: 



This listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of Claims : 



information comprising the steps of: 

providing at least one user apparatus; 
a remote server; and 

a communications link between the at least one user apparatus and the remote 

server; 

allocating disk storage space on the remote server unique to the at least one user 
apparatus; 

allowing at least one user access to the storage space via username and password 
login to the server and via secure encryption of data sent to or from the user apparatus 
from or to the server; and 

allowing at least one further user access to the data storage space and wherein the 
further users access to the data storage space can be managed by the at least one user with 
regard to times and dates when the at least one further user can write to and/or read from 
the data storage space. 

Claim 2 (previously presented): A method of controlling access to electronic 
information as claimed in claim 1, wherein the secure encryption comprises: 

transactions involving access to the storage space being protected by a 
requirement for a user to present a digital certificate. 

Claim 3 (previously presented): A method of controlling access to electronic 
information as claimed in claim 42 2, wherein the digital certificate is required whenever 
the user attempts to r e ad or write to or read from e^4e the storage space. 



Claim 1 (previously presented): 



A method of controlling access to electronic 



Claim 4 (original): A method of controlling access to electronic information as 
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claimed in claim 3, wherein data sent by a user apparatus is encrypted by public key in 
the case of SSL transactions and additionally by private key via presentation of a digital 
certificate in the case of accessing the data storage space. 

Claim 5 (original): A method of controlling access to electronic information as 
claimed in claim 4, wherein data received by the server is decrypted via private key in the 
case of SSL transactions and by public key in the case of digital certificate verification 
accessing the data storage space. 

Claim 6 (cancelled) 

Claim 7 (previously presented): A method of controlling access to electronic 
information as claimed in claim 1, wherein each said at least one further user is allowed 
access to the data storage space upon presentation of a further digital certificate. 

Claim 8 (previously presented): A method of controlling access to electronic 
information as claimed in claim 1, wherein the communications link comprises the 
Internet. 

Claim 9 (previously presented): An electronic safety deposit system or tender box 
system comprising: 

at least one user apparatus; 

a remote server; 

a communications link between the at least one user apparatus and the remote 

server; 

disk storage space allocated on the remote server unique to the at least one user 
apparatus; 

means for allowing at least one user access to the storage space via username and 
password login and via secure encryption of data sent to or from the user apparatus from 
or to the server; 

means for allowing at least one further user access to the data storage space; and 
means for managing the further users access to the data storage space by the at 
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least one user with regard to times and dates when the at least one further user can write 
to and/or read from the data storage space. 

Claim 10 (previously presented): A method of providing an account-based 
Internet/Intranet service which allows an at least one account holder to: 

create at least one secure electronic deposit box on a centralised server in which 
box or boxes store documentation in a secure environment; 

manage timeframes for invited participants to access said documentation and/or 
for the invited participants to upload to the centralised server further documentation, 
wherein 

the method utilizes a method of controlling access to electronic information as 
claimed in claim 1 . 

Claim 11 (original): A method as claimed in claim 10, wherein the method further 
allows the at least one account holder to track activity relating to each said at least one 
electronic deposit box. 

Claim 12 (previously presented): A secure electronic deposit or tender box system 
comprising an account-based Internet or Intranet server system with a worldwide web 
(HTTP) interface for uploading and downloading documentation onto a centralised server 
in a secure environment, using digital certificates to ensure data confidentiality, data 
integrity, data authentication, non-repudiation and proof of origin and receipt, the system 
using an electronic safety deposit system as claimed in claim 9. 

Claim 13 (currently amended): A computer program product adapted for use in the 
method of any of claims 1 to 8, 10 and 1 1 claim 1 . 

Claim 14 (currently amended): A computer program product when used in the 
method of any of claims 1 to 8 , 10 and 1 1 claim 1 . 



Claim 15 (currently amended): A computer program adapted for implementation of 
the method of any of claims 1 to 8, 10 and 1 1 claim 1 . 
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Claim 16 (currently amended): A computer or server when loaded with the a 
computer program product adapted for use in any of claims 1 or 9 the method of claim L 

Claim 17 (previously presented): A method of controlling access to electronic 
information as claimed in claim 2, wherein the secure encryption further comprises 
transactions between user and server being encrypted using Secure Socket Layer (SSL). 

Claim 18 (previously presented): An electronic safety deposit system or tender box 
system as claimed in claim 9, wherein the secure encryption comprises transactions 
involving access to the storage space being further protected by a requirement for a user 
to present a digital certificate, in use. 

Claim 19 (previously presented): Use of an electronic safety deposit system or tender 
box system in a method of controlling access to electronic information as claimed in 
claim 1. 

Claim 20 (new): 
claim 10. 

Claim 21 (new): 
claim 1 1 . 

Claim 22 (new): 

Claim 23 (new): 

Claim 24 (new): 
claim 10. 

Claim 25 (new): 
claim 1 1 . 



A computer program product adapted for use in the method of 



A computer program product adapted for use in the method of 



A computer program product when used in the method of claim 10. 
A computer program product when used in the method of claim 1 1 . 
A computer program adapted for implementation of the method of 



A computer program adapted for implementation of the method of 
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Claim 26 (new): A computer or server when loaded with a computer program 
product adapted for use in the method of claim 1. 



